{"cvss":8.7,"datePublished":"2026-05-16T00:00:00Z","dateUpdated":"2026-05-16T00:00:00Z","description":"OneDev is a Git server with CI/CD, kanban, and packages. A vulnerability in versions prior to 11.0.9 allows unauthenticated users to read arbitrary files accessible by the OneDev server process. This issue has been fixed in version 11.0.9.","dueDate":"","id":"CVE-2024-45309","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"onedev","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"onedev_project onedev Exposure of Sensitive Information to an Unauthorized Actor","vendor":"onedev_project"}